{"id":"261bfbdc-d486-4257-bbad-314494875ef0","slug":"clawhub-paudyyin-coding-framework","name":"coding-framework","description":"Orchestrate the complete coding workflow with multiple development modes (TDD/incremental/spec-dr...","canonicalUrl":"https://www.xpersona.co/agent/clawhub-paudyyin-coding-framework","sourceUrl":"https://clawhub.ai/paudyyin/coding-framework","homepage":"https://clawhub.ai/paudyyin/skills/coding-framework","source":"CLAWHUB","vendor":{"slug":"clawhub","label":"Clawhub","url":"https://clawhub.ai/paudyyin/skills/coding-framework"},"protocols":["OPENCLEW"],"capabilities":[],"trustScore":null,"trustConfidence":"unknown","artifactCount":0,"benchmarkCount":0,"lastRelease":"13.0.0","freshnessAt":"2026-10-11T18:51:56.961Z","freshnessLabel":"Oct 11, 2026","securityReviewed":true,"openapiReady":false,"stats":[{"label":"Trust score","value":"Unknown"},{"label":"Compatibility","value":"OpenClaw"},{"label":"Freshness","value":"Oct 11, 2026"},{"label":"Vendor","value":"Clawhub"},{"label":"Artifacts","value":"0"},{"label":"Benchmarks","value":"0"},{"label":"Last release","value":"13.0.0"}],"factsPreview":[{"factKey":"vendor","category":"vendor","label":"Vendor","value":"Clawhub","href":"https://clawhub.ai/paudyyin/skills/coding-framework","sourceUrl":"https://clawhub.ai/paudyyin/skills/coding-framework","sourceType":"profile","confidence":"medium","observedAt":"2026-10-11T18:51:56.978Z","isPublic":true},{"factKey":"protocols","category":"compatibility","label":"Protocol compatibility","value":"OpenClaw","href":"https://www.xpersona.co/api/v1/agents/clawhub-paudyyin-coding-framework/contract","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-paudyyin-coding-framework/contract","sourceType":"contract","confidence":"medium","observedAt":"2026-10-11T18:51:56.978Z","isPublic":true},{"factKey":"traction","category":"adoption","label":"Adoption signal","value":"1K downloads","href":"https://clawhub.ai/paudyyin/coding-framework","sourceUrl":"https://clawhub.ai/paudyyin/coding-framework","sourceType":"profile","confidence":"medium","observedAt":"2026-10-11T18:51:56.978Z","isPublic":true},{"factKey":"latest_release","category":"release","label":"Latest release","value":"13.0.0","href":"https://clawhub.ai/paudyyin/coding-framework","sourceUrl":"https://clawhub.ai/paudyyin/coding-framework","sourceType":"release","confidence":"medium","observedAt":"2026-08-03T00:55:05.468Z","isPublic":true},{"factKey":"handshake_status","category":"security","label":"Handshake status","value":"UNKNOWN","href":"https://www.xpersona.co/api/v1/agents/clawhub-paudyyin-coding-framework/trust","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-paudyyin-coding-framework/trust","sourceType":"trust","confidence":"medium","observedAt":null,"isPublic":true}],"highlights":["1K downloads","Trust evidence available"],"agentCard":{"name":"coding-framework","description":"Orchestrate the complete coding workflow with multiple development modes (TDD/incremental/spec-dr...","source":"CLAWHUB","sourceId":"clawhub:s172x1s50dh0bgmm3yc9516nr586kk4b:coding-framework","homepage":"https://clawhub.ai/paudyyin/skills/coding-framework","repository":"https://clawhub.ai/paudyyin/coding-framework","documentation":"https://www.xpersona.co/agent/clawhub-paudyyin-coding-framework","protocols":["OPENCLEW"],"examples":[{"kind":"example","language":"text","snippet":"File v13.0.0:references/iteration-patterns.md\n\n# 迭代模式参考\r\n\r\n> coding-framework 的迭代循环机制详细说明。\r\n\r\n## 概述\r\n\r\n借鉴 Claude Code Ralph Wiggum 的 Stop Hook 自引用循环模式，通过状态文件 + 循环控制器实现可控的迭代执行。\r\n\r\n## 迭代模式\r\n\r\n### fixed（固定次数）\r\n\r\n执行指定次数后停止，不做完成条件判断。"},{"kind":"example","language":"text","snippet":"File v13.0.0:references/security-patterns-detail.md\n\n# 安全模式详细说明\r\n\r\n> 25 种安全模式的完整说明，含检测逻辑、修复方案和真实案例。\r\n\r\n## 概述\r\n\r\n安全模式集成到 hook-engine 的 PreExec 钩子，用于命令执行前和代码审查时的安全检测。\r\n灵感来源：Claude Code security-guidance（~2000 行 Python，25 种安全模式）。\r\n\r\n## 严重级别处理策略\r\n\r\n| 级别 | 处理方式 | 示例 |\r\n|------|----------|------|\r\n| critical | 阻止执行 + 报告用户 + 记录日志 | SQL 注入、SSRF、提权 |\r\n| high | 阻止执行 + 请求确认 + 记录日志 | XSS、硬编码凭证、外部下载 |\r\n| medium | 允许执行 + 记录告警日志 | 不安全加密、资源泄漏、CORS |\r\n| low | 记录日志，不干预 | 代码风格安全建议 |\r\n\r\n## 模式分类\r\n\r\n### 系统安全（1-8）\r\n\r\n1. **危险命令** (critical) — rm -rf /, format, diskpart, mkfs\r\n2. **注册表操作** (critical) — reg add/delete, Set-ItemProperty HKLM\r\n3. **账户管理** (critical) — net user, useradd, Add-LocalGroupMember\r\n4. **服务管理** (high) — sc delete/config, systemctl, net start/stop\r\n5. **计划任务** (high) — schtasks, crontab, New-ScheduledTask\r\n6. **外部下载** (high) — curl/wget 到非白名单域名, certutil\r\n7. **批量操作** (high) — del /s /q, 管道接 Remove-Item\r\n8. **提权操作** (critical) — runas, sudo, su, pkexec\r\n\r\n### 数据安全（9-12）\r\n\r\n9. **敏感数据传输** (high) — scp .ssh/.env, curl -d password\r\n10. **代码执行风险** (high) — eval(拼接), exec(拼接), subprocess shell=True\r\n11. **敏感信息泄露** (high) — 硬编码 API key, Bearer token\r\n12. **路径遍历** (high) — ../../, %2e%2e, /etc/passwd\r\n\r\n### 注入攻击（13-15）\r\n\r\n13. **SQL 注入** (critical) — 字符串拼接 SELECT/WHERE\r\n14. **XSS 风险** (high) — innerHTML, document.write, v-html\r\n15. **不安全反序列化** (critical) — pickle.load, yaml.load 无 Loader\r\n\r\n### 凭证安全（16）\r\n\r\n16. **硬编码凭证** (high) — password=, secret=, private_key=\r\n\r\n### 加密安全（17）\r\n\r\n17. **不安全加密** (medium) — MD5, SHA1, DES, RC4, AES-ECB\r\n\r\n### 资源管理（18-19）\r\n\r\n18. **资源泄漏** (medium) — open() 无 close/with, connect() 无释放\r\n19. **竞态条件** (medium) — TOCTOU: if exists → open\r\n\r\n### 其他（20-25）\r\n\r\n20. **不安全随机数** (medium) — Math.random 用于安全场景\r\n21. **日志注入** (medium) — 用户输入直接写入日志\r\n22. **SSRF** (critical) — 用户输入构造请求 URL\r\n23. **XXE** (critical) — XML 解析未禁用外部实体\r\n24. **不安全 CORS** (medium) — Access-Control-Allow-Origin: *\r\n25. **依赖漏洞** (medium) — 已知漏洞的旧版本依赖\r\n\r\n## CWE 映射\r\n\r\n| 模式 | CWE |\r\n|------|-----|\r\n"}]}}